Severely out of date dependencies make `npm dedupe` fail for many upstream projects (`istanbul`, in this case).
Loosening the dependency to any minor revision helps avoid this failure, while not impacting functionality whatsoever.